• 所有社区 - 中文
    • 所有社区 - 中文
    • 论坛
    • 创意
    • 博客
高级

不是您要找的? 咨询专家!

好评0

Scare Message

I get this message about once a day. Are you familiar with it?

OK, I tried to include a .jpg of the threat warning.

I got a .png now. Did it upload?

文件附件: 

回复

好评2 Stats

Re: Scare Message

Hi Bob-mcc,

The upload of scare.png succeeded. This looks like a tech support scam. I would ignore the warning.

The site is masquerading as Microsoft, but it doesn't not come from Microsoft.com.

I will also send this to internal folks to make sure we block it for all Norton customers.

Regards,

Torrey Umland

好评0

Re: Scare Message

Thanks, Torrey. I will add the urls of the websites just prior to the scare screen. It is in the order that they appear in the browser's history. The latest one is on top. That is the one that sent the malware screen. The bottom url is att.net where I went to check my email..

https : //d1nkumj01332kz . cloudfront . net/v9/message.html?trk=pastion-taried.com&osv=Windows%207&ip=68.9.218.120&cep=Arlv8CdOOItkJhjZiqjWtc_dz4esh_NjdLQUjEkcJG4EstRKPvC-T1x-p8CLQCEKPdLVq1vAI01ZXF0ZpZb7Yrqk-J1N7cnjbPD-TGYkD6Jrpptyq-7JN5P_fGcxD-lphScPR6n1jlg-9fKPprik8NBIm2e7wnoegS_grOWQ63_RdjZ_YSBjW3EXC5Y3pSvtpHooavZBVbXvhJzV5W4ZY7j3MqYj3Upnkue8tw0QsKVvBNuW3Q99pDdumJe3x_BX&zone=1806387-3979200730-0&country=US&time=1544806702&cid=15448067011141496440142440166805814

http : // nextoptim . com/script/s2iurl . php?csid=1806387&md=0&s1=13342&stamat=m%7C%2C%2Cg2E243YnoGU3BJ9GH0dEdHP3xP.810%2CiOUtIegL3mbO-vonTaZuRA0gW4cCSrDZ76LeWOYcSPw0OBHaGS1O1cpEPIc_vIDmqFZMwgZmvp7t_5_-We0_82xdkStb9eJzz2p3612WZ3D8GcOte2NQC2u-1l1Vv1oeJjLh5tYpMIitIRlmZYB_OUHCEQMF0TvPrnGRYamWNb8xLFa-Rwbd7lI548BMtLLxXdrA-RlFEzIq2U7gSNkpr7kIOe6eHUvmKh3G8DVti7euSRTqkXxvH1VzgoLlqlq7kUiq4Hiyqy8rTukaVYut9Vwsgo7YFYomkmYwGdowz_6ZcDeAC0Y4kBTg4hP5jNmRkP8egC0xHDCWWeRanOtTuS9ADCtaIwH6MBjaCYa0k07Jc4GX-6j1ieuQ4CkXZ0-85pm9uBc95JZfGlj5TNKj8A%2C%2C

https :// advertisingfeed . com/click?node=1&time=1544806680&id=47&pid=8&fid=8&sid=13342&rank=0&ad=eyJ0aXRsZSI6IiIsInVybCI6IiJ9

https :// serviceoperative . com/out?out=https%3A%2F%2Fcreativechecker.com%2F%3Fpid%3D8%26sid%3Dstream%26kw%3Dbuy%26f%3Dclick%26bu%3Dhttps%253A%252F%252Fserviceoperative.com%252Fclick.php%253Fkey%253Dg6xhj2igkvvbntwx10jd%2526t1%253Dzone%2526t2%253Dstream%2526t3%subzone%2526cost%253Dusdcost

https :// cpmazu . com/w/1.4/1201031004 . js?pubid=ba9b94jj&domain=start.att.net&t=Ag9ZUVtbcHJrcHQEHVZCRFtue3FudAQGT0hBU3Ryf3FyFGc6

https : // start . att . net/

好评0

Re: Scare Message

Thank you Bob-mcc!! That is really useful information.

Looks like your browser was hit with a malicious advertisement redirect.

Torrey Umland

好评0

Re: Scare Message

One more suggestion, @Bob-mcc.

The Norton SafeWeb browser extension blocks a lot of these kinds of attacks.

If you have not installed SafeWeb in Chrome/Firefox browser, I would recommend installing. Norton Security usually prompts users to install SafeWeb extension.

Torrey Umland

This thread is closed from further comment. Please visit the forum to start a new thread.